This page describes what the HTTP headers of KRFN requests and responses mean.
These headers are sent by the client to the server.
Summary Table
| Header Key |
Role / Description |
Category |
nVJuf6NNHtyez3xTRKix |
User Session token (Sent after login) |
Session |
LGEwRMs6UzzbidE8raAg |
Request identification (UUID & SessionId) for idempotency |
Session |
X-STAR-R-V |
Client resource version hash |
Resource |
User-Agent |
Device & OS specific browser agent |
Version |
Unity-User-Agent |
Unity framework browser agent |
Version |
X-Unity-Version |
Static Unity engine version |
Version |
PznxhHrYEDRrfARyBgRp |
Encryption flag for request payloads |
Validation |
2PcpGWb2EJGmnagcrVxY |
Request body & metadata signature hash |
Validation |
Detailed Specifications
nVJuf6NNHtyez3xTRKix (User Session)
| Item |
Specification |
| Role |
User Session Token |
| Category |
Session Header |
| Description |
Active session token sent in subsequent requests after successful authentication. |
LGEwRMs6UzzbidE8raAg (Identify Value of Request)
| Item |
Specification |
| Role |
Request Identifier |
| Category |
Session Header |
| Description |
Formatted as a random UUID combined with the current SessionId. Used to guarantee request idempotency and prevent duplicate processing. |
X-STAR-R-V (Resource Version Hash)
Note
Client Resource Request Routing
We don't know why this header is needed, because the client sends requests to the asset server instead of the API.
| Item |
Specification |
| Role |
Resource Version Hash |
| Category |
Resource Header |
| Description |
The resourceVersionHash obtained at /api/app/version/get. |
| Example |
321d1767653ccfd106384a7aeac5be75 |
User-Agent (HTTP User Agent)
| Item |
Specification |
| Role |
Application User Agent |
| Category |
Version Header |
| Description |
App request user agent. It depends on the device and the app version. |
| Example |
kirarafantasia/32170 CFNetwork/976 Darwin/18.2.0 |
Unity-User-Agent (Unity User Agent)
| Item |
Specification |
| Role |
Unity User Agent |
| Category |
Version Header |
| Description |
Unity default user agent. It depends on the device and the app version. |
| Example |
app/0.0.0; iOS 12.1.2; iPhone6S; iPhone8,1 |
X-Unity-Version (Unity Engine Version)
| Item |
Specification |
| Role |
Unity Engine Version |
| Category |
Version Header |
| Description |
Unity default version header. This is a static value. |
| Example |
2018.4.28f1 |
PznxhHrYEDRrfARyBgRp (Request Encrypted Flag)
| Item |
Specification |
| Role |
Request Encrypted Flag |
| Category |
Validation Header |
| Description |
If this header is set to 1, the request body is encrypted, and the server must decrypt it. |
| Example |
1 |
2PcpGWb2EJGmnagcrVxY (Request Hash)
| Item |
Specification |
| Role |
Request Signature Hash |
| Category |
Validation Header |
| Description |
Request hash value calculated based on request body, path, timestamp, and a specific encryption salt logic to ensure message integrity. |
These headers are returned by the server to the client.
Summary Table
| Header Key |
Role / Description |
Category |
nVJuf6NNHtyez3xTRKix |
User Session token (Issued upon login) |
Session |
kNNHMre7jsDEHFaURYBP |
Encryption flag for response payloads |
Validation |
X-Star-CC |
Response body signature hash |
Validation |
Detailed Specifications
nVJuf6NNHtyez3xTRKix (User Session - Issuance)
| Item |
Specification |
| Role |
Session Token Issuance |
| Category |
Session Header |
| Description |
Session value that the server responds with at /api/player/login. |
kNNHMre7jsDEHFaURYBP (Response Encrypt Flag)
| Item |
Specification |
| Role |
Response Encrypt Flag |
| Category |
Validation Header |
| Description |
If this header is set to 1, the response body is encrypted, and the client must decrypt it. |
| Example |
1 |
X-Star-CC (Response Hash)
| Item |
Specification |
| Role |
Response Signature Hash |
| Category |
Validation Header |
| Description |
Response hash value used to verify the integrity of server-sent payloads. |